Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5T5CbZ6Mx-VT9r-_hkt_UhT-kk.roa
File: h5T5CbZ6Mx-VT9r-_hkt_UhT-kk.roa (raw, json)
Hash identifier: ojy+IKnKcHDyS481X+43hGt0fh9HLt/zheXmG47gGn0=
Subject key identifier: 87:94:F9:09:B6:7A:33:1F:95:4F:DA:FE:FE:19:2D:FD:48:53:FA:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FEF04FD67611EAF5FBCBB69D30CD34B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5T5CbZ6Mx-VT9r-_hkt_UhT-kk.roa
Signing time: Mon 20 Mar 2023 12:13:27 +0000
ROA not before: Mon 20 Mar 2023 12:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:f0:4f:d6:76:11:ea:f5:fb:cb:b6:9d:30:cd:34:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 12:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8794f909b67a331f954fdafefe192dfd4853fa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:1f:69:d0:63:a1:7d:df:c9:35:28:e7:f5:
18:00:d7:b9:81:84:9b:85:ad:1a:de:14:ca:1b:cf:
63:58:d1:03:22:5c:d3:b0:1d:b9:da:7e:a8:62:eb:
93:78:60:3d:49:54:66:fb:d2:cc:50:ef:46:87:59:
2d:3b:99:3a:58:88:31:63:a7:10:f5:3c:78:43:69:
03:2d:f1:9a:8b:69:38:bc:e7:6d:12:a4:2c:b5:04:
fc:dd:35:87:24:5c:2a:5b:72:5f:b7:21:38:fa:9b:
f0:dd:cd:5f:ce:2a:bf:f2:57:51:12:0a:a4:ac:5b:
99:90:d5:4f:09:6d:a6:a5:e9:4e:e1:7a:f5:59:e5:
1a:57:87:d7:e9:f5:9b:ba:e1:3c:84:9f:48:ae:4b:
4f:a2:a2:48:06:ce:55:f3:5a:2e:70:ed:65:bb:a9:
80:10:b0:b1:c4:07:56:31:e2:68:fb:61:b7:83:f9:
59:46:33:d7:87:4e:30:77:c8:a4:61:45:c2:c6:72:
7c:8d:66:40:fd:49:58:7b:84:dd:d1:d8:01:7c:b9:
8e:39:6a:6a:20:41:5f:32:2e:17:a8:0e:eb:1b:05:
73:28:e8:aa:df:7e:04:5e:d7:80:85:3b:38:e8:1e:
10:f0:e1:c5:0e:09:88:de:7a:5d:fa:85:25:f2:64:
54:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:94:F9:09:B6:7A:33:1F:95:4F:DA:FE:FE:19:2D:FD:48:53:FA:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/h5T5CbZ6Mx-VT9r-_hkt_UhT-kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:e8:6d:45:7a:19:c9:4e:46:55:50:d0:b9:15:88:67:ee:2a:
e9:94:06:a9:85:78:12:d9:28:ca:5a:d7:81:e5:6c:bd:46:5c:
cf:62:87:b5:95:61:3c:4a:d8:36:0f:07:8b:ee:d6:31:bb:5f:
31:e2:3a:f9:ca:65:00:87:a5:95:55:7a:2e:5c:56:53:01:c0:
da:7f:4a:f2:0f:74:d7:f9:e5:a3:e2:94:e9:55:e1:98:a9:5b:
89:7b:c3:89:bf:63:cb:e1:8a:3f:5d:ef:d1:8a:9b:80:2b:0a:
a3:a7:8c:a7:70:67:47:7f:c2:cf:9e:99:d8:ef:ac:91:ce:0c:
28:21:ae:64:e6:68:d5:7b:33:da:c0:c1:17:15:bf:be:8b:d1:
d2:6c:2a:12:f7:72:84:34:06:49:76:77:7b:4e:9a:8b:13:ee:
3d:31:79:59:75:da:3a:f9:75:7e:53:84:f4:a4:db:cf:7d:11:
e4:aa:1a:0e:36:55:15:5b:a0:0f:ec:8a:84:e6:96:41:09:c0:
15:e3:bb:3a:49:39:a3:39:89:16:f7:d8:19:22:a2:37:f8:1e:
8c:ec:93:15:ba:7d:36:28:7c:d7:05:e5:9d:44:27:0d:95:09:
13:2e:e1:82:0a:5f:3f:7e:32:b7:f3:0e:9c:89:40:59:c4:6f:
dd:c8:e2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:52 2025 by rpki-client